Governance Matrix

ClipShield is architected to satisfy the most rigorous global security standards. Our "Zero-Cloud" design simplifies vendor risk assessments by eliminating 3rd party data processing.

ISO/IEC 27001:2022

Information Security

The global standard for ISMS. ClipShield directly addresses Annex A controls regarding data leakage and secure engineering.

CONTROL ID REQUIREMENT CLIPSHIELD IMPLEMENTATION
A.8.12 Data Leakage Prevention Real-time Regular Expression (DFA) scanning of the system clipboard to prevent unauthorized exfiltration of sensitive assets.
A.8.28 Secure Coding Written in Rust to guarantee memory safety, eliminating buffer over-reads/writes common in C++ legacy agents.
A.5.33 Protection of Records Audit logs are encrypted at rest using SQLCipher (AES-256) with hardware-derived keys, ensuring tamper-proof history.
ISO/IEC 27701

Privacy & GDPR

Extension to ISO 27001 for Privacy Information Management. Critical for GDPR and CCPA alignment.

PRINCIPLE REQUIREMENT CLIPSHIELD IMPLEMENTATION
Data Sovereignty Cross-border transfer restrictions (Schrems II) Absolute Local Processing. No data ever leaves the endpoint. Zero international transfers.
Privacy by Design Art. 25 GDPR Default "Redact" mode strips PII (SSN, Email) from the clipboard buffer proactively before paste actions occur.
Minimization Data limitation Logs are stored locally and rotated. No centralized "Honey Pot" of user data exists in the cloud.
ISO/IEC 42001

AI Management System

The new standard for Responsible AI. Ensures AI systems are transparent, fair, and secure.

AREA FOCUS GHOSTBRAIN IMPLEMENTATION
Transparency Explainable AI behavior Deterministic ONNX runtime. Model weights are static and auditable. No "Black Box" API calls.
Training Data Rights & Usage Zero Training on User Data. Input is only used for inference (vector cosine similarity) and immediately discarded.
Robustness Adversarial resistance Runs in an isolated memory space. Input sanitization prevents prompt injection attacks against the scanner itself.

Need a formal Vendor Assessment packet?

DOWNLOAD VENDOR PACKET (PDF)